NewGuardrails
Vercel token scanning expands to more public sources
Our short summary of Vercel’s engineering write-up. The full story, with all the detail, is on their blog.
Read the full write-up on vercel.com (opens in a new tab)Problem
Publicly exposed Vercel tokens let attackers access projects and incur unexpected costs.
Solution
They created an automated scanner, partnered with Truffle Security and added a monthly web crawl check, to detect and revoke leaked tokens across many public sources.
Hundreds of tokens revoked
Want the architecture, code and numbers? They’re in the original post.
Read the full write-up on vercel.com (opens in a new tab)